城市(city): unknown
省份(region): unknown
国家(country): Thailand
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 119.42.109.120 | attack | 20/8/19@23:50:45: FAIL: Alarm-Network address from=119.42.109.120 20/8/19@23:50:45: FAIL: Alarm-Network address from=119.42.109.120 ... |
2020-08-20 16:33:22 |
| 119.42.109.147 | attackbots | unauthorized connection attempt |
2020-02-16 17:34:44 |
| 119.42.109.230 | attackspam | Unauthorized connection attempt detected from IP address 119.42.109.230 to port 23 [J] |
2020-02-05 09:14:31 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.109.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58191
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.42.109.52. IN A
;; AUTHORITY SECTION:
. 307 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022031201 1800 900 604800 86400
;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 13 07:59:23 CST 2022
;; MSG SIZE rcvd: 106Host 52.109.42.119.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.109.42.119.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 62.109.30.103 | bots | 62.109.30.103 - - [23/Apr/2019:13:53:01 +0800] "GET /license.php/ HTTP/1.1" 301 194 "google.com" "Mozilla/5.0 Gecko/20100101 Firefox/57.0" |
2019-04-23 13:57:47 |
| 101.226.114.193 | attack | 101.226.114.193 - - [22/Apr/2019:08:26:29 +0800] "GET /web/cgi-bin/hi3510/param.cgi?cmd%253Dgetp2pattr%2526cmd%253Dgetuserattr HTTP/1.1" 301 194 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" 101.226.114.193 - - [22/Apr/2019:08:26:29 +0800] "GET /web/cgi-bin/hi3510/param.cgi?cmd%253Dgetp2pattr%2526cmd%253Dgetuserattr HTTP/1.1" 404 209 "http://118.25.52.138/web/cgi-bin/hi3510/param.cgi?cmd%253Dgetp2pattr%2526cmd%253Dgetuserattr" "Mozilla/5.0 (iPhone; CPU iPhone OS 9_3_4 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Mobile/13G35 QQ/6.5.3.410 V1_IPH_SQ_6.5.3_1_APP_A Pixel/750 Core/UIWebView NetType/2G Mem/117" |
2019-04-22 08:28:33 |
| 115.209.249.243 | bots | 115.209.249.243 - - [19/Apr/2019:12:02:05 +0800] "GET /index.php/2018/11/12/time_cook_2018_11_12_en/ HTTP/1.1" 200 34515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" 115.209.249.243 - - [19/Apr/2019:12:02:16 +0800] "GET /index.php/2018/09/30/google_2018_09_30_cn/ HTTP/1.1" 200 40499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" 115.209.249.243 - - [19/Apr/2019:12:02:44 +0800] "GET /index.php/2018/09/30/google_2018_09_30_cn/ HTTP/1.1" 200 40499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36" |
2019-04-19 12:40:00 |
| 120.92.90.154 | botsattack | 120.92.90.154 - - [17/Apr/2019:00:04:34 +0000] "POST /public/index.php HTTP/1.1" 404 15604 "-" "python-requests/2.21.0" 120.92.90.154 - - [17/Apr/2019:00:04:35 +0000] "GET /public/gqxuracc.php HTTP/1.1" 404 15604 "-" "python-requests/2.21.0" 120.92.90.154 - - [17/Apr/2019:00:04:35 +0000] "POST /public/index.php HTTP/1.1" 404 15604 "-" "python-requests/2.21.0" 120.92.90.154 - - [17/Apr/2019:00:04:35 +0000] "GET /public/gqxuracc.php HTTP/1.1" 404 15604 "-" "python-requests/2.21.0" |
2019-04-17 08:12:27 |
| 185.132.133.23 | proxy | 可能是代理检测吧 185.132.133.23 - - [19/Apr/2019:18:21:50 +0800] "CONNECT mobile.chomikuj.pl:80 HTTP/1.1" 400 182 "-" "-" |
2019-04-19 18:22:44 |
| 116.7.22.4 | bots | 116.7.22.4 - - [19/Apr/2019:21:44:40 +0800] "GET /index.php/category/root/ HTTP/1.1" 200 74293 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 116.7.22.4 - - [19/Apr/2019:21:44:46 +0800] "GET /index.php/category/root/airbnb/ HTTP/1.1" 200 76208 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 116.7.22.4 - - [19/Apr/2019:21:44:54 +0800] "GET /index.php/category/root/amd/ HTTP/1.1" 200 105403 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 116.7.22.4 - - [19/Apr/2019:21:45:09 +0800] "GET /index.php/category/root/instacart/ HTTP/1.1" 200 54716 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" 116.7.22.4 - - [19/Apr/2019:21:45:18 +0800] "GET /index.php/category/root/lyft/ HTTP/1.1" 200 75675 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" |
2019-04-19 21:48:14 |
| 143.137.171.62 | spamattack | 143.137.171.62 - - [19/Apr/2019:02:11:36 +0800] "GET /index.php/2019/02/26/bitcoin_2019_02_26_en/ HTTP/1.1" 200 12755 "https://en.eznewstoday.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" 143.137.171.62 - - [19/Apr/2019:02:11:39 +0800] "POST /wp-comments-post.php HTTP/1.1" 302 4164 "https://en.eznewstoday.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" 143.137.171.62 - - [19/Apr/2019:02:11:41 +0800] "GET /index.php/2019/02/26/bitcoin_2019_02_26_en/ HTTP/1.1" 200 12755 "https://en.eznewstoday.com" "Mozilla/4.0 (compatible; MSIE 6.0; Wind ows NT 5.1; en) Opera 8.50" |
2019-04-19 06:41:37 |
| 134.175.20.103 | attack | 恶意攻击 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /sha.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /ppx.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /1.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /confg.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /conf1g.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 134.175.20.103 - - [18/Apr/2019:20:51:46 +0800] "POST /confg.php HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" |
2019-04-18 20:52:46 |
| 81.92.203.247 | spam | 81.92.203.247 - - [21/Apr/2019:05:49:50 +0800] "GET /index.php/2018/12/14/bert-transformer/ HTTP/1.0" 200 44744 "https://www.eznewstoday.com/index.php/2018/12/14/bert-transformer/" "Mozil la/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 81.92.203.247 - - [21/Apr/2019:05:49:51 +0800] "POST /wp-comments-post.php HTTP/1.0" 302 4143 "https://www.eznewstoday.com/index.php/2018/12/14/bert-transformer/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" 81.92.203.247 - - [21/Apr/2019:05:49:51 +0800] "GET /index.php/2018/12/14/bert-transformer/ HTTP/1.0" 200 44744 "https://www.eznewstoday.com/index.php/2018/12/14/bert-transformer/#comment -14272" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36" |
2019-04-21 06:58:05 |
| 14.29.116.223 | botsattack | 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /myadmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /pma/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /MyAdmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /phpMyAdmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET /phpmyadmin/scripts/setup.php HTTP/1.1" 301 194 "-" "ZmEu" 14.29.116.223 - - [18/Apr/2019:11:39:04 +0800] "GET HTTP/1.1" 400 182 "-" "-" |
2019-04-18 11:39:46 |
| 40.77.188.137 | bots | bingbot |
2019-04-21 08:23:38 |
| 80.241.211.186 | bots | Crawler: majestic |
2019-04-19 16:58:10 |
| 200.53.15.17 | attack | 200.53.15.17 - - [21/Apr/2019:04:56:51 +0800] "GET /wp-login.php HTTP/1.1" 302 284 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 200.53.15.17 - - [21/Apr/2019:04:56:52 +0800] "GET /wp-login.php HTTP/1.1" 200 7801 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 200.53.15.17 - - [21/Apr/2019:04:56:52 +0800] "GET / HTTP/1.1" 301 283 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" 200.53.15.17 - - [21/Apr/2019:04:56:53 +0800] "GET / HTTP/1.1" 200 93842 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" |
2019-04-21 06:59:00 |
| 115.159.185.71 | attack | 攻击IP 可以禁用Invalid user death |
2019-04-19 17:11:05 |
| 185.226.146.149 | botsattack | 185.226.146.149 - - [23/Apr/2019:11:46:18 +0800] "GET /check-ip/162.243.134.187 HTTP/1.0" 200 56262 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0" 185.226.146.149 - - [23/Apr/2019:11:46:20 +0800] "GET /?q=node/add HTTP/1.1" 200 3262 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0" 185.226.146.149 - - [23/Apr/2019:11:46:21 +0800] "GET /?q=user/register HTTP/1.1" 200 3262 "https://ipinfo.asytech.cn/?q=node/add" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0" 185.226.146.149 - - [23/Apr/2019:11:46:21 +0800] "GET /check-ip/162.243.134.187 HTTP/1.1" 200 8238 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0" 185.226.146.149 - - [23/Apr/2019:11:46:22 +0800] "GET /?q=user/register HTTP/1.1" 200 3270 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-04-23 11:47:06 |